api-tester

SUSPICIOUS: the skill’s core behavior is coherent with its stated purpose and its data flows appear to target official provider APIs, but it requires executing private unverified local code that receives raw API keys. This is a high-trust credential-handling workflow with medium-high security risk, not confirmed malware.